CVEvulnerability

CVE-2021-22003

7.5 HIGH Published 2021-08-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-08-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-307

Description

VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force the login endpoint, which may or may not be practical based on lockout policy configuration and password complexity for the target account.

Affected configurations

• vmware identity manager 3.3.2 • vmware identity manager 3.3.3 • vmware identity manager 3.3.4 • vmware identity manager 3.3.5 • vmware workspace one access 20.01 • vmware workspace one access 20.10 • vmware workspace one access 20.10.01 • vmware cloud foundation 4.0 • vmware cloud foundation 4.0.1 • vmware cloud foundation 4.1 • vmware cloud foundation 4.1.0.1 • vmware cloud foundation 4.2.1 • vmware vrealize suite lifecycle manager 8.0 • vmware vrealize suite lifecycle manager 8.0.1 • vmware vrealize suite lifecycle manager 8.1 • vmware vrealize suite lifecycle manager 8.2

Related

Weakness · CWE (1)

  • CWE-307 Improper Restriction of Excessive Authentication Attempts weakness

References